Question 1

Which information is required when adding a device to Firepower Management Center?
A) username and password
B) encryption method
C) device serial number
D) registration key

Accepted Answer

The registration key is required to add a device to the Firepower Management Center, as it is used to authenticate and establish a connection between the device and the management center.

Question 2

A mall provides security services to customers with a shared appliance. The mall wants separation of management on the shared appliance. Which ASA deployment mode meets these needs?
A) routed mode
B) multiple zone mode
C) multiple context mode
D) transparent mode

Accepted Answer

Multiple context mode allows for the separation of management by creating multiple virtual firewalls within a single physical ASA appliance, each with its own configuration and management.

Question 3

Refer to the exhibit. Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?
A) Site-to-site VPN preshared keys are mismatched.
B) Site-to-site VPN peers are using different encryption algorithms.
C) No split-tunnel policy is defined on the Firepower Threat Defense appliance.
D) The access control policy is not allowing VPN traffic in.

Accepted Answer

The answer of  Refer to the exhibit. Traffic is...

Question 4

An engineer notices traffic interruptions on the network. Upon further investigation, it is learned that broadcast packets have been flooding the network. What must be configured, based on a predefined threshold, to address this issue?
A) Storm Control
B) embedded event monitoring
C) access control lists
D) Bridge Protocol Data Unit guard

Accepted Answer

Storm Control is used to prevent broadcast, multicast, and unicast storms on a network by setting a threshold to limit the amount of broadcast traffic.

Question 5

Which exfiltration method does an attacker use to hide and encode data inside DNS requests and queries?
A) DNS tunneling
B) DNSCrypt
C) DNS security
D) DNSSEC

Accepted Answer

DNS tunneling is a method used by attackers to hide and encode data within DNS requests and queries, allowing data exfiltration through the DNS protocol.

Question 6

An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used. However, the connection is failing. Which action should be taken to accomplish this goal?
A) Generate the RSA key using the crypto key generate rsa command. Generate the RSA key using the crypto key generate rsa command.
B) Configure the port using the ip ssh port 22 command. Configure the port using the ip ssh port 22
C) Enable the SSH server using the ip ssh server command. Enable the SSH server using the ip ssh server
D) Disable telnet using the no ip telnet command. Disable telnet using the no ip telnet

Accepted Answer

The RSA key is used for secure communication and is generated using the crypto key generate rsa command.

Question 7

Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?
A) quality of service
B) time synchronization
C) network address translations
D) intrusion policy

Accepted Answer

Time synchronization is a feature configured for managed devices in the device platform settings of the Firepower Management Center to ensure accurate timekeeping across the network.

Question 8

An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device. Which mechanism should the engineer configure to accomplish this goal?
A) sFlow
B) NetFlow
C) mirror port
D) VPC flow logs

Accepted Answer

The answer of An engineer needs behavioral analysis to detect...

Question 9

What can be integrated with Cisco Threat Intelligence Director to provide information about security threats, which allows the SOC to proactively automate responses to those threats?
A) Cisco Umbrella
B) External Threat Feeds
C) Cisco Threat Grid
D) Cisco Stealthwatch

Accepted Answer

The answer of What can be integrated with Cisco Threat...

Question 10

A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0383320506 address 0.0.0.0 command on host A. The tunnel is not being established to host B. What action is needed to authenticate the VPN?
A) Change the password on host A to the default password
B) Enter the command with a different password on host B
C) Enter the same command on host B
D) Change isakmp to ikev2 in the command on host A Change isakmp to ikev2 in the command on host A

Accepted Answer

The same ISAKMP key must be configured on both hosts for the VPN tunnel to authenticate and establish successfully.

Question 11

Refer to the exhibit. A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command output?
A) interesting traffic was not applied
B) encryption algorithm mismatch
C) authentication key mismatch
D) hashing algorithm mismatch

Accepted Answer

The answer of  Refer to the exhibit. A network...

Question 12

What is a key difference between Cisco Firepower and Cisco ASA?
A) Cisco Firepower provides identity based access control while Cisco ASA does not.
B) Cisco AS provides access control while Cisco Firepower does not.
C) Cisco ASA provides SSL inspection while Cisco Firepower does not.
D) Cisco Firepower natively provides intrusion prevention capabilities while Cisco ASA does not.

Accepted Answer

Cisco Firepower natively includes intrusion prevention capabilities, whereas Cisco ASA requires additional modules or integration for such features.

Question 13

A Cisco FirePower administrator needs to configure a rule to allow a new application that has never been seen on the network. Which two actions should be selected to allow the traffic to pass without inspection? (Choose two.)
A) permit
B) allow
C) reset
D) trust
E) monitor

Accepted Answer

The "allow" action permits traffic to pass through the firewall, and the "trust" action allows traffic to pass without inspection.

Question 14

The Cisco ASA must support TLS proxy for encrypted Cisco Unified Communications traffic. Where must the ASA be added on the Cisco UC Manager platform?
A) Certificate Trust List
B) Endpoint Trust List
C) Enterprise Proxy Service
D) Secured Collaboration Proxy

Accepted Answer

The Cisco ASA must be added to the Certificate Trust List (CTL) on the Cisco UC Manager platform to support TLS proxy for encrypted communications. This ensures that the ASA is trusted to handle encrypted traffic.

Question 15

Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two.)
A) SIP
B) inline normalization
C) SSL
D) packet decoder
E) modbus

Accepted Answer

The answer of Which two application layer preprocessors are used...

Question 16

What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?
A) It allows the administrator to quarantine malicious files so that the application can function, just not maliciously.
B) It discovers and controls cloud apps that are connected to a company's corporate environment.
C) It deletes any application that does not belong in the network.
D) It sends the application information to an administrator to act on.

Accepted Answer

Cloudlock Apps Firewall helps in discovering and controlling cloud applications that are connected to a company's corporate environment, thereby mitigating security concerns by managing app access and usage.

Question 17

What is a feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?
A) Multiple NetFlow collectors are supported.
B) Advanced NetFlow v9 templates and legacy v5 formatting are supported.
C) Secure NetFlow connectors are optimized for Cisco Prime Infrastructure
D) Flow-create events are delayed.

Accepted Answer

Cisco NetFlow Secure Event Logging for Cisco ASAs supports multiple NetFlow collectors, allowing for more flexible and scalable network monitoring and analysis.

Question 18

Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?
A) Threat Intelligence Director
B) Encrypted Traffic Analytics.
C) Cognitive Threat Analytics.
D) Cisco Talos Intelligence

Accepted Answer

Threat Intelligence Director is a feature in Cisco FMC that allows it to integrate and push security intelligence observables to its sensors from other products.

Question 19

What is a characteristic of a bridge group in ASA Firewall transparent mode?
A) It has an IP address on its BVI interface and is used for management traffic.
B) It allows ARP traffic with a single access rule.
C) It includes multiple interfaces and access rules between interfaces are customizable.
D) It is a Layer 3 segment and includes one port and customizable access rules.

Accepted Answer

It includes multiple interfaces and access rules between interfaces are customizable.

Question 20

Which technology reduces data loss by identifying sensitive information stored in public computing environments?
A) Cisco SDA
B) Cisco Firepower
C) Cisco HyperFlex
D) Cisco Cloudlock

Accepted Answer

Cisco Cloudlock is a cloud-native cloud access security broker (CASB) that helps organizations protect sensitive data in cloud environments by identifying and controlling sensitive information.

Exam 41: Implementing Cisco Collaboration Core Technologies (CLCOR)

Which information is required when adding a device to Firepower Management Center?

A mall provides security services to customers with a shared appliance. The mall wants separation of management on the shared appliance. Which ASA deployment mode meets these needs?

Refer to the exhibit. Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?

An engineer notices traffic interruptions on the network. Upon further investigation, it is learned that broadcast packets have been flooding the network. What must be configured, based on a predefined threshold, to address this issue?

Which exfiltration method does an attacker use to hide and encode data inside DNS requests and queries?

An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used. However, the connection is failing. Which action should be taken to accomplish this goal?

Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?

An engineer needs behavioral analysis to detect malicious activity on the hosts, and is configuring the organization's public cloud to send telemetry using the cloud provider's mechanisms to a security device. Which mechanism should the engineer configure to accomplish this goal?

What can be integrated with Cisco Threat Intelligence Director to provide information about security threats, which allows the SOC to proactively automate responses to those threats?

A network engineer is configuring DMVPN and entered the crypto isakmp key cisc0383320506 address 0.0.0.0 command on host A. The tunnel is not being established to host B. What action is needed to authenticate the VPN?

What is a key difference between Cisco Firepower and Cisco ASA?

A Cisco FirePower administrator needs to configure a rule to allow a new application that has never been seen on the network. Which two actions should be selected to allow the traffic to pass without inspection? (Choose two.)

The Cisco ASA must support TLS proxy for encrypted Cisco Unified Communications traffic. Where must the ASA be added on the Cisco UC Manager platform?

Which two application layer preprocessors are used by Firepower Next Generation Intrusion Prevention System? (Choose two.)

What does the Cloudlock Apps Firewall do to mitigate security concerns from an application perspective?

What is a feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?

Which product allows Cisco FMC to push security intelligence observable to its sensors from other products?

What is a characteristic of a bridge group in ASA Firewall transparent mode?

Which technology reduces data loss by identifying sensitive information stored in public computing environments?